Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/kWdheGkYy89HjHwVIs-zD7A2SFw.roa
File: kWdheGkYy89HjHwVIs-zD7A2SFw.roa (raw, json)
Hash identifier: eRVcAatM2PQOPrjZcGnJcrSc4/l6yuq8LcGHsElsISA=
Subject key identifier: 91:67:61:78:69:18:CB:CF:47:8C:7C:15:22:CF:B3:0F:B0:36:48:5C
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0189D4DA86418B4B8D55D3428D345AA1BC77
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/kWdheGkYy89HjHwVIs-zD7A2SFw.roa
Signing time: Tue 08 Aug 2023 11:13:58 +0000
ROA not before: Tue 08 Aug 2023 11:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.110.172.0/23 maxlen: 24
85.117.242.0/24 maxlen: 24
192.144.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:da:86:41:8b:4b:8d:55:d3:42:8d:34:5a:a1:bc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Aug 8 11:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=916761786918cbcf478c7c1522cfb30fb036485c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:14:6c:64:22:11:9e:cf:e4:ef:02:52:30:
e8:f2:40:ab:6b:c4:c2:00:0a:59:47:4a:31:49:e7:
a2:4a:9a:f4:c6:15:2a:b2:62:3d:e2:6f:67:a8:b5:
e6:a4:56:fa:05:cc:28:ef:a1:d0:ea:ad:bc:84:69:
5e:8f:5f:11:8d:0f:78:99:cd:4e:bd:fd:d3:6e:ff:
33:ea:91:0f:5f:fe:2e:d8:fd:9d:d0:c0:28:62:a3:
a8:1a:9c:ec:73:ac:b2:22:f5:b9:61:ec:85:1a:f3:
06:2b:4e:a0:20:b5:05:d2:4f:12:f4:54:93:94:75:
ef:30:27:38:8e:c3:8f:6b:44:a7:79:d3:35:f0:2b:
ff:dd:64:d6:47:90:3f:2e:20:d3:e0:a6:54:b5:40:
9d:f3:66:89:f5:ec:79:c5:c1:0f:3f:f0:59:26:d3:
78:2e:77:e3:3e:6e:46:84:26:2f:aa:01:cb:a0:2d:
f7:57:b5:92:65:ce:a1:35:ec:ba:c1:7e:b2:96:0b:
50:73:b5:49:a5:1d:94:46:00:86:1c:6f:5f:05:7d:
75:e3:17:21:f6:44:67:49:19:5b:fe:78:ce:b9:21:
5d:a8:ad:3c:54:93:75:6a:50:75:78:8c:c4:8d:2f:
ca:f3:82:f9:7d:8e:0b:64:73:5c:5c:0c:27:29:a2:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:67:61:78:69:18:CB:CF:47:8C:7C:15:22:CF:B3:0F:B0:36:48:5C
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/kWdheGkYy89HjHwVIs-zD7A2SFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.242.0/24
192.144.32.0/24
194.110.172.0/23
Signature Algorithm: sha256WithRSAEncryption
62:16:92:c3:43:65:d5:ec:8e:5d:ee:4e:ff:a7:c5:db:87:5a:
cb:c4:61:5a:12:2e:74:79:bf:e0:46:06:b8:c9:4f:bf:d5:53:
a2:c7:5a:30:e7:03:4e:73:6a:ad:77:0f:41:0e:e6:89:b8:51:
a8:72:8c:cc:72:ba:35:7a:32:ec:1a:b5:bb:2c:ae:43:ee:de:
79:4f:01:74:6d:19:12:39:56:be:9b:f0:12:a8:bd:10:7c:5a:
52:9a:57:89:c7:52:74:4a:7e:dc:f7:a2:83:5f:6e:6b:50:f7:
da:ad:a0:b1:ab:77:05:9e:77:54:69:93:5d:3d:28:c5:7c:8f:
3d:7a:0f:09:aa:29:cb:e8:7a:24:6c:20:27:1c:2f:b0:f8:0b:
31:9e:e4:d2:e6:92:68:c3:36:84:df:a7:9f:4c:76:59:48:d6:
e6:04:b4:7d:d3:b8:eb:b6:ee:76:56:ce:75:d9:08:5f:3e:89:
0d:b6:88:25:06:04:42:b4:16:31:74:07:ad:cf:82:ed:22:2f:
2e:08:4c:88:f8:75:3d:46:e0:e5:14:c3:65:5c:27:cd:fc:d6:
0d:77:d5:56:86:5d:8f:24:77:3d:20:5e:8c:38:e3:ae:f6:4a:
65:f6:72:3d:56:ce:95:f0:d9:e5:d4:d7:e9:d2:8e:46:50:fd:
6b:64:ef:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:02 2025 by rpki-client